Privacy notice

On this website

The website sets no cookies and shows no advertising. We count visits with Vercel Web Analytics, which works without cookies and doesn't follow you across websites: a visit is counted from a short-lived anonymous identifier that changes every day. Our host, Vercel, also keeps technical logs, including IP addresses, for a short time to run and protect the website.

In the Telegram bot

When you use the bot, we keep: your Telegram user ID and chat ID and your app's language; the sizes you give us; your watches (pieces, labels, the most you'll pay) and your consent to alerts; the alerts we send you; and the links you follow and any resulting orders reported by the retailer's affiliate network, without your name.

The messages you write are used to answer you, then cleared; the technical record of each message is deleted after 7 days.

Photos you send are used once, to search for the piece or describe it, then discarded: we never store them. Telegram keeps its own copy, and the photo is processed by Anthropic's Claude service to read it.

Why, and on what basis

To provide the service you ask for: search, watches and alerts (performance of the service you request). To count visits and keep the service secure (our legitimate interest). To keep accounts of commissions (legal obligation).

We don't sell your data, we don't use it for advertising, and we don't make decisions about you with legal or similarly significant effects.

How long

Your Telegram IDs, sizes, watches and consent: until you delete them. Messages: cleared after processing, gone after 7 days. Photos: never stored. Hourly backups of user data: 30 days. The database's restore history: 7 days. Server logs: 14 days, without message text. Error reports: 30 days, with personal details removed.

Deleting your data: /delete

Send /delete to the bot and we delete your Telegram IDs, sizes, watches and consent at once. Records of links followed, alerts sent and orders are kept for our accounts and commission figures, but with the link to you removed, so they no longer identify you. Backups age out within 30 days.

You can also ask for a copy of your data at contact@theauralist.eu; we send it in a documented, readable format.

Who processes it for us

Vercel (website hosting, servers in Frankfurt); Neon (database, Frankfurt); Scaleway (server and storage, Paris); Hetzner (backup copies, Germany); Anthropic (Claude, which reads messages and photos to answer them); Sentry (error reports, EU region). Telegram runs its own messenger as an independent controller under its own privacy policy.

Vercel and Anthropic are US companies. Where data reaches the United States, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You can access, correct, delete or receive a copy of your data, object to its use or ask us to restrict it, by writing to contact@theauralist.eu. We answer within a month. You can also complain to the CNIL, the French data protection authority (cnil.fr), or to the data protection authority of the country where you live.